Skip to content

misp-stix v2.4.194 - A few fixes and an important change to the Tags handling to avoid duplication of Event tags into Attributes

Compare
Choose a tag to compare
@chrisr3d chrisr3d released this 21 Jun 13:32
· 179 commits to main since this release
6bb8186

v2.4.194 - 2024-06-21

Included in the release

  • A few issues fixed
  • Some clean-up of the duplicated methods after the latest Converters have been merged
  • Avoiding the duplication of Event tags in Attributes
    ➡️ When an Event is tagged with a specific tag, it implies all the Attributes contained in this Event are implicitly tagged with the same tag. We do not need to explicitly tag all the Attributes with the same tag in that case.
    ❌ : As a naive approach, we were looping through Marking Definitions to tag individually each Attribute when there was a reference between the corresponding STIX object and Marking Definition
    ✅ Now we first check if a given Tag is already attached to the Event before attaching it to an Attribute

Chg

  • [poetry] Updated lock file with latest versions
  • [poetry] Latest version
  • [stix2 export] Cleaner STIX 2.x object IDs handling

Fix

  • [stix2 import] Deduplication of the Event tags that were also added to Attributes
  • [stix2 import] Removed unused methods
  • [stix2 import] Avoid returning an error message for marking-definition refs not parsed
  • [stix2 export] Cleaner code
  • [stix2 import] Differenciating the network traffic mapping to use when parsing indicators